The findings were announced at the 2012 RSA Archer GRC Summit, a gathering of 600 GRC professionals in Chicago.

ARCHER SUMMIT, CHIGAGO, IL, June 5, 2012 -

RSA, The Security Division of EMC (NYSE: EMC) today announced the results of a recent report from Forrester Consulting outlining the total economic impact (TEI) and potential return on investment (ROI) that enterprises may realize by deploying the RSA Archer Platform for enterprise Governance Risk and Compliance (eGRC). The findings were announced at the 2012 RSA Archer GRC Summit in Chicago, and detail the results of an April 2012 survey of current RSA Archer customers who provided insights and opinions on how their organizations achieved a composite organization 3-year risk-adjusted ROI of 572% based on quantified key benefits.

"It's satisfying to hear customers attesting to the kind of positive transformation and ROI experienced through their implementation of the RSA Archer eGRC platform," said Amit Yoran, Senior Vice President and General Manager, Security Management and Compliance at RSA. "In addition to the investments we've made to improve the usability and functionality of the Archer platform, it's the Archer customer community - their collective ideas, feedback and our continuous communication with them that makes this success possible."

The interviews conducted for this study involved representatives from global companies in the energy, financial services, electronics manufacturing and entertainment sectors. These interviews uncovered a number of valuable insights, including:

"The RSA Archer platform gives us a common language," noted an interviewee. "Audit can talk about the same high-risk item as compliance, and they now use the same vocabulary, which all started in IT."

"If we developed in another platform other than RSA Archer, we would double or triple what we are paying for RSA Archer," according to another study participant.

Another customer participant said: "With the first iteration of our adoption of [RSA] Archer, we moved into what I consider to be the start of the Industrial Era where we built a machine that allowed us to wield these (risk) assessments on a far broader scale, with a larger degree of automation, and we improved our efficiency."

"Our intent is to do more analysis of the investments we make, and make the right investments," said another RSA Archer customer in the report. "[RSA] Archer increases chances of matching the value of an investment versus the cost. We can't correlate the risks using Excel. We need to use a mature, consistent process… that's the biggest value of GRC and RSA Archer is the tool to make that possible."

The RSA Archer platform is designed to enable an efficient, collaborative eGRC program across IT, finance, operations, and legal domains. The RSA Archer platform is engineered to help enterprises easily manage risks, demonstrate compliance, and automate business processes, and gain visibility into corporate risk and security controls.

Amit Yoran adds: "Visibility into risk and assured compliance are fundamental business requirements that can truly affect a company's bottom line. Many of our customers have found that by implementing the RSA Archer platform as a key component in managing their eGRC programs, compliance is no longer a 'tax' on the business, but instead can be leveraged as a tool to improve business performance."

About RSA

RSA, The Security Division of EMC, is the premier provider of security, risk and compliance management solutions for business acceleration. RSA helps the world's leading organizations solve their most complex and sensitive security challenges. These challenges include managing organizational risk, safeguarding mobile access and collaboration, proving compliance and securing virtual and cloud environments.

Combining business-critical controls in identity assurance, encryption & key management, SIEM, Data Loss Prevention, Continuous Network Monitoring, and Fraud Protection with industry leading eGRC capabilities and robust consulting services, RSA brings visibility and trust to millions of user identities, the transactions that they perform and the data that is generated. For more information, please visit www.EMC.com/RSA.